Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/66D5661AF4EE11EFAD7ABC85762E951A.roa
File: 66D5661AF4EE11EFAD7ABC85762E951A.roa (raw, json)
Hash identifier: 6yp8QAOnDnf9O6HjZFIehV4H1hGd9LIdEHx2yAUjU8k=
Subject key identifier: A3:89:71:16:74:91:69:A7:0D:BA:DA:57:4D:9F:A6:49:8B:74:3E:21
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016748
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/66D5661AF4EE11EFAD7ABC85762E951A.roa
Signing time: Thu 27 Feb 2025 09:37:04 +0000
ROA not before: Thu 27 Feb 2025 09:37:00 +0000
ROA not after: Wed 26 Mar 2025 09:37:00 +0000
asID: 62240
IP address blocks: 154.196.82.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91976 (0x16748)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 27 09:37:00 2025 GMT
Not After : Mar 26 09:37:00 2025 GMT
Subject: CN=67c03240-6f6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:5b:ac:89:b3:6d:52:40:48:90:c6:4f:b7:19:
4a:a5:91:b3:7f:77:6e:bb:4b:13:00:52:5e:4a:63:
94:98:f8:77:bd:7e:2b:36:41:97:27:df:cd:cb:0b:
d1:35:c5:ad:4c:47:9f:2f:ba:42:4c:1c:ed:1c:7e:
01:e7:42:97:2c:99:e7:4b:df:8b:d0:64:1f:b0:59:
76:08:ae:fb:a3:8d:3d:8b:4e:8b:6c:23:cb:63:de:
c3:6a:75:f1:71:e8:cc:0b:37:82:16:3f:1a:43:67:
c9:08:04:65:40:ba:e9:86:32:f0:9c:03:f9:e5:c9:
ff:14:6a:13:f0:30:32:0f:11:98:da:2a:0c:52:17:
5e:6e:56:bd:a1:95:61:f7:7f:33:ed:de:30:90:f2:
d1:77:7a:7a:e9:b2:a2:cb:04:3a:c5:e1:4e:1c:7b:
b1:e3:79:d9:5a:f9:0c:d9:90:ea:c1:47:4a:4b:ab:
2f:23:4f:e3:ba:aa:f1:58:c5:64:03:18:e4:d1:c7:
5c:2a:d0:55:c5:7a:47:b6:f6:b3:35:53:11:fd:cb:
db:e7:1d:c4:99:3c:a1:89:82:c5:f7:1d:4c:c8:e0:
58:be:fb:6b:be:87:90:1e:4d:21:01:cf:f5:4c:19:
fb:f8:ec:c7:33:b8:fb:bd:5d:6c:92:34:38:3c:b0:
8d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:89:71:16:74:91:69:A7:0D:BA:DA:57:4D:9F:A6:49:8B:74:3E:21
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/66D5661AF4EE11EFAD7ABC85762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.82.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:a7:2b:fd:1e:a8:e2:69:37:cf:ef:37:ef:32:22:2c:22:44:
ce:52:e7:a2:4d:65:8d:92:68:2f:51:29:30:3b:e6:d4:44:8d:
4a:7f:ff:da:aa:c6:1f:e3:b0:e8:a2:db:04:87:83:7c:80:fd:
9d:39:da:dc:50:69:75:d8:af:16:9d:d8:f6:8a:fd:f3:59:a0:
57:e7:ff:05:de:75:d7:b6:3f:82:d0:bb:d7:82:6b:b5:b2:7e:
df:bf:6c:7f:12:83:67:91:ac:46:2e:00:1d:69:9c:e9:79:61:
12:be:e7:5e:6d:a6:39:ec:d2:8f:e0:53:6f:f2:82:f4:2a:2a:
cf:4f:1d:06:37:34:9b:a6:ac:3a:df:51:3d:77:36:73:74:25:
cf:58:90:7a:ed:32:ed:46:56:38:76:1e:8e:be:42:4b:01:5c:
ba:c0:ef:de:2c:96:41:12:eb:e4:b8:e4:c7:64:bc:42:a5:bb:
28:43:0a:3a:fd:af:05:8d:51:eb:2d:8f:cf:1c:4e:20:8a:dd:
68:02:5d:55:c6:8d:fc:c5:60:be:67:6a:bd:e4:dd:eb:bb:c9:
f0:4c:a2:88:22:c1:c0:bf:0b:e3:96:1b:44:26:a9:1e:7b:5c:
09:28:dd:d1:86:b4:57:bb:b7:26:2d:41:b3:8e:70:78:89:a9:
ae:8b:b1:75
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAWdIMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI3MDkzNzAwWhcNMjUwMzI2MDkzNzAwWjAYMRYw
FAYDVQQDEw02N2MwMzI0MC02ZjZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAoVusibNtUkBIkMZPtxlKpZGzf3duu0sTAFJeSmOUmPh3vX4rNkGXJ9/N
ywvRNcWtTEefL7pCTBztHH4B50KXLJnnS9+L0GQfsFl2CK77o409i06LbCPLY97D
anXxcejMCzeCFj8aQ2fJCARlQLrphjLwnAP55cn/FGoT8DAyDxGY2ioMUhdebla9
oZVh938z7d4wkPLRd3p66bKiywQ6xeFOHHux43nZWvkM2ZDqwUdKS6svI0/juqrx
WMVkAxjk0cdcKtBVxXpHtvazNVMR/cvb5x3EmTyhiYLF9x1MyOBYvvtrvoeQHk0h
Ac/1TBn7+OzHM7j7vV1skjQ4PLCN2QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFKOJ
cRZ0kWmnDbraV02fpkmLdD4hMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82NkQ1NjYxQUY0RUUxMUVGQUQ3QUJDODU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsRSMA0GCSqGSIb3DQEB
CwUAA4IBAQDBpyv9HqjiaTfP7zfvMiIsIkTOUueiTWWNkmgvUSkwO+bURI1Kf//a
qsYf47DootsEh4N8gP2dOdrcUGl12K8Wndj2iv3zWaBX5/8F3nXXtj+C0LvXgmu1
sn7fv2x/EoNnkaxGLgAdaZzpeWESvudebaY57NKP4FNv8oL0KirPTx0GNzSbpqw6
31E9dzZzdCXPWJB67TLtRlY4dh6OvkJLAVy6wO/eLJZBEuvkuOTHZLxCpbsoQwo6
/a8FjVHrLY/PHE4git1oAl1Vxo38xWC+Z2q95N3ru8nwTKKIIsHAvwvjlhtEJqke
e1wJKN3RhrRXu7cmLUGzjnB4iamui7F1
-----END CERTIFICATE-----
Generated at Fri May 9 06:28:26 2025 by rpki-client